With the CISM certification, you’ll be on your way to a higher level of knowledge. In the field of information security, continual education is critical. Every day, the field is evolving and changing. As a result, new information and technology pathways have emerged. In any industry, having more information is beneficial; attaining the CISM certification is a stepping stone on your route to continued learning.
The applicant might benefit from CISM certification because it recognizes the high level of competence and abilities required of an information security professional. This certification provides the individual with verifiable evidence of career advancement and opens the door to a raise in compensation or promotion.
QUESTION 1
Which of the following is the MOST important consideration when presenting objectives and benefits of an information security program to on technical stakeholders?
- Usingbusiness terms
- Usingmeasurable terms
- Usingtechnical terms
- Usingfinancial metrics
Correct Answer: B
QUESTION 2
The MAIN purpose of incorporating socia medial monitoring into the information security program is to:
- assessemployee adherence to policy
- identifydisgruntled employees
- detectpotential information disclosure
- gaugepublic opinion of the company
Correct Answer: C
QUESTION 3
An organization is considering the deployment of encryption software and systems organization-wide. The MOST important consideration should be whether:
- thebusiness strategy includes exceptions to the encryption standard
- theimplementation supports the business strategy
- aclassification pol cy has been developed to incorporate the need for encryption
- datacan be recovered if the encryption keys are misplaced
Correct Answer: D
QUESTION 4
Which of the following provides the BEST evidence that a control is being applied effectively?
- Businessimpact analysis (BIA)
- Keyrisk indicators (KRIs)
- Numberof incidents reported
- Keyperformance indicators (KPIs)
Correct Answer: D
QUESTION 5
An email digital signature will:
- verifyto recipients the integrity an email message
- automaticallycorrect unauthorized modification of an email message
- protectthe confidentiality of an emai message
- preventun author zed modification of an em all message
Correct Answer: A
QUESTION 6
Over the last year.an information security manager has performed risk assessments on multiple third-party vendors Which of the following criteria would be MOST helpful in determining the associated level of risk applied to each vendor?
- Compliancerequirements associated with the regulation
- Compensatingcontrols in place to protect information security
- Correspondingbreaches associated with each vendor
- Criticalityof the service to the organization
Correct Answer: D
QUESTION 7
Which of the following is the MAIN reason for integrating an organization’s incident response pian with its business continuity process?
- Recoverytime objectives (RTOs) need to be determined
- Incidentscan escalate into disasters needing proper response
- Incidentswill be reported more timely when categorized as a disaster
- Integrationof the plan will reduce resource costs to the organization
Correct Answer: B
QUESTION 8
Which of the following should be the PRIMARY goal of an information se cunty manager when designing information security policies?
- Minimizingthe cost of security controls
- Improvingthe protection of information
- Reducingorganizational security risk
- Achievingorganizational objectives
Correct Answer: C
QUESTION 9
Which of the following is the MOST important reason to involve externa forensics experts in evidence collection when responding to a major security or each?
- Tovalidate the incident response process
- Toensure evidence is handled by qualified resources
- Toor event evidence from being disclosed to any interna staff members
- Toprovide the response team with expert training on evidence handling
Correct Answer: C
QUESTION 10
When determining an acceptable risk level which of the following is the MOST important consideration?
- Riskmatrices
- Threatprofiles
- Systemcriticalities
- Vulnerabilityscores
Correct Answer: B
QUESTION 11
In a multinational organization, local security regulations should be implemented over global security policy because:
- businessobjectives are defined by local business unit
- deployingawareness of local regulations is more practical than of global
- requirementsof local regulations take
- globalsecurity policies include unnecessary controls for local
Correct Answer: C
How did it turn out for you? We provide CISM dumps with a 100% pass rate guarantee. You are invited to consult us if you are dissatisfied with your present result.
Comments